Some Offsets

Page 1 of 2

06/06/2011 07:59 My420Time#1

Was bored today and decided to fool around with the bot a little bit.. Attached you will find a cheat table with some the offsets for the current patch.

Updated Offsets:

Code:

// Current Health
        public static int pCharacter_Hp =       0x400000 + 0xAF8DE0;    //8byte //Updated
        // Current Mana
        public static int pCharacter_Mp =       0x400000 + 0xAF8DE8;    //8byte //Updated
        // Character Max Health
        public static int pCharacter_HpMax =    0x400000 + 0xAF09F8;    //Updated
        // Character Max Mana
        public static int pCharacter_MpMax =    0x400000 + 0xAF0EFC;    //Updated
        // Character Name
        public static int pCharacter_Name =     0x400000 + 0xAF8BC4;    //string //Updated
        // Character Current Rage
        public static int pCharacter_Rage =     0x400000 + 0xCDEB88;    //Updated
        // Pet Current Health
        public static int pPet_CurrentHp =      0x400000 + 0xB14C18;    //4byte //Updated
        // Pet Current Mana
        public static int pPet_CurrentMp =      0x400000 + 0xB14F40;    //4byte - Might be switch with Max //Updated
        // Pet Max Health
        public static int pPet_HpMax =          0x400000 + 0xB14C1C;    //Updated
        // Pet Max Mana
        public static int pPet_MpMax =          0x400000 + 0xB14F44;    //Might be switched with Current //Updated
        // Pet Active
        public static int pPet_FrameIsOut =     0x400000 + 0xB13D24;    //byte //Updated
        // Target Name
        public static int pTarget_PointerName = 0x400000 + 0xD8395C;    //4byte, Points to name with 0 offset //updated
        // Is the target a monster?
        public static int pTarget_IsMonster =   0x400000 + 0xD826F4;    //2byte, also is alive //Updated
        // Is the target a Lord?
        public static int pTarget_IsLord =      0x400000 + 0xD870F0;    //2byte //updated
        // Is the target tagged?
        public static int pTarget_HasBeenHit =  0x400000 + 0xD8A9DC;    //2byte //updated
        // Is Target Attackable pointer (758,94,50,528,760)
        public static int pTarget_CannotAttack = 0x400000 + 0xD78B54; //byte //Updated
        // Map ID
        public static int pCharacter_Map_ID = 0x400000 + 0x7CBC4C; //4byte //Updated
        // Map X
        public static int pCharacter_Map_X = 0x400000 + 0x7CBAC0; //float //Updated
        // Map Y
        public static int pCharacter_Map_Y = 0x400000 + 0x7CBAC4; //float //Updated
        // Destination Map ID
        public static int pCharacter_Dest_ID = 0x400000 + 0xAEEB5C; //4byte //Updated
        // Destination Map X
        public static int pCharacter_Dest_X = 0x400000 + 0xAEFB64; //float (25/16) //Updated
        // Destination Map Y
        public static int pCharacter_Dest_Y = 0x400000 + 0xAEFB68; //float (25/16) //Updated
        // Casting or Foraging
        public static int pCharacter_Casting = 0x400000 + 0xCDBE44; //byte //Updated
        // Chat Active
        public static int pCharacter_Chatting = 0x400000 + 0x14D31F3; //byte //Updated
        // Mounted (Non-Attack Mount)
        public static int pCharacter_Mounted = 0x400000 + 0xD92F6C; //byte //Updated
        // Character is Party Leader
        public static int pCharacter_IsLeader = 0x400000 + 0xCEBC74; //byte //Updated
        // Party Leader Map ID -- Note, references replacement leader if you are leading party, not yourself)
        public static int pLeader_Map_ID = 0x400000 + 0xAEEC90; //4byte //Updated
        // Party Leader Map X
        public static int pLeader_Map_X = 0x400000 + 0xAEEC98; //float //Updated
        // Party leader Map Y
        public static int pLeader_Map_Y = 0x400000 + 0xAEEC94; //float //Updated
        // Party leader Realm
        public static int pLeader_Realm = 0x400000 + 0xAEDD08; //byte //Updated
        // Character Rrealm
        public static int pCharacter_Realm = 0x400000 + 0xAD5CD2; //byte //Updated
        // Party Size
        public static int pParty_Size = 0x400000 + 0xAEEB94; //byte //Updated
        // Quest, Trade/Drop Confirmation, Sys Menu Windows Open  (There are 3 statics which trigger on most windows, only this one triggers on the Sys Window)
        public static int pQuestWindow_Open = 0x400000 + 0xDC32BC; //byte //Updated
        // Duel Screen Open  (The one value that DOES trigger for the System window does NOT trigger for the Duel Window, so need to check both of these)
        public static int pDuelWindow_Open = 0x400000 + 0xCD3BE4; //byte //Updated

EDIT1:

Anyone have a game.exe from last patch? Would be easier to just update the signatures/masks but need something to compare with.

EDIT2:
So fooled around with it again today and found a few more. I am down to a couple offsets now and will dump the game.exe later to update caliburst for autoroute/usebagitem.

EDIT3:

Updated a few more offsets to the list as well as added Warning of Wisdom pointers.

EDIT4:

Updated Target Name Pointer, Party Size, Duel Window Open BOOL, Quest Window Open BOOL, Target is Lord, and Target is Tagged offsets.

06/06/2011 15:44 dlnqt#2

i have the game.exe before the anni patch. where do you want me to send it to?

can anyone compile this? :D

good to have you back :)

EDIT:

Updated this part based on your offset, boi gb doesnt even detect the name :(

// Character Name
public static int pCharacter_Name = 0x401000 + 0xAF8BC4; //string

06/06/2011 20:26 Inathero#3

try 0x400000 instead of 0x401000 ^^

06/06/2011 21:08 My420Time#4

Quote:

Originally Posted by dlnqt

i have the game.exe before the anni patch. where do you want me to send it to?

can anyone compile this? :D

good to have you back :)

EDIT:

Updated this part based on your offset, boi gb doesnt even detect the name :(

// Character Name
public static int pCharacter_Name = 0x401000 + 0xAF8BC4; //string

Inathero is right, you most likely need to change the 0x401000. I will look double check the base value later. As far as the old game.exe you can email it or pm it to me.

06/07/2011 06:27 dlnqt#5

Hmm I did try to change it to 0x400000 yesterday and it was the same result. I'll send it to you as soon as I get home :D I'm at work right now..

06/07/2011 06:30 My420Time#6

Quote:

Originally Posted by dlnqt

Hmm I did try to change it to 0x400000 yesterday and it was the same result. I'll send it to you as soon as I get home :D I'm at work right now..

Tested the bot just a few moments ago with the offsets above and it work just fine. :P On another note, Having some issues dumping the game.exe.. assuming they changed the version of VMProtect or something because it see my debugger which once worked fine. ;)

Edit1:

Ohh yea did they close down the Abyss server? I use to play there and haven't been able to access it at all.

06/07/2011 07:03 dlnqt#7

I managed to attach a debugger using phantom23's OllyDBG + StrongOD. I never tried to dump game.exe though. I'm using Windows XP BTW.

I think Abyss server is usually bugged. I play in Atlantis though I sometimes see Abyss Server offline before.

EDIT:
Offsets work for me :) Uploaded the game.exe :D

06/09/2011 08:08 tekc#8

heres the updated target name pointer

public static int pTarget_PointerName = 0x400000 + 0x00D8395C; //D82954; //4byte, Points to name with 0 offset

let me know if you're interested in added the love match, and warning of wisdom answers into the boigb

I've managed to nest them in my own modded copy of the gb, as well as some other cool features

I also made a small change inside the Attack Thread, in botsession.cs, its around line 740 for me

Code:

while (true)
            {
                [B][U][U]if (BitConverter.ToInt16(HomeGrown.Hacking.Process_ReadMemory(LocalGlobals.BIO_OpenedHandle, pCharacter_Chatting, 2), 0) == 1 && !Me.HoldAttack && Me.Attack)
                {[/U][/U][/B]
                    if (!Me.HoldAttack && !GotCurrentTarget())
                    {

it prevents the gb from spamming numbers inside the chat window when you're typing

heres the offset i use for the character chatting

public static int pCharacter_Chatting = 0x000000 + 0xED5EE4;//14D21EB; //byte

06/09/2011 09:09 Menzoberanza#9

After I did changes, Bot doesnt detect name of my character.
Yes I did try to change to 0x400000 instead of 0x401000, without any luck
And YES Im runing under admin ;)

which left me clueless :)

Would love some advice

EDIT 1: yup, Im stupid :) its all working as it should now :) my simple mistake

EDIT 2: Another problem, game.exe tends to crash after hitting "Start" button on bot
I can only say not always, was runing good for like 35 mintues non-stop until I stoped it,
then killed game 4 times in row... Im not that good at C++, so I will shut it and wait
for big "boys and girls" to smack me with fish and point with finger direction I should
look for solution.

06/09/2011 18:10 Inathero#10

@Menzo just to let you know, boiGB is in C# not C++ ^^

06/09/2011 19:38 grolmih#11

Quote:

Originally Posted by Menzoberanza

Another problem, game.exe tends to crash after hitting "Start" button on bot
I can only say not always, was runing good for like 35 mintues non-stop until I stoped it,
then killed game 4 times in row... Im not that good at C++, so I will shut it and wait
for big "boys and girls" to smack me with fish and point with finger direction I should
look for solution.

workaround for the crash when you press "start" is :

if you make any changes to the bot config or character setups and you select save then start the bot, the bot crashes
but if you make changes press save , close the bot , then reopen the bot and select any character but don't make any other changes just press start the bot will start

the other problem that the bot crashes after 35minutes...well this bot is unstable it crashes after 30m but it can last the most 5 hours (this was my record) maybe someone will do a good update on it...or maybe not who knows.

06/09/2011 21:29 My420Time#12

Quote:

Originally Posted by grolmih

workaround for the crash when you press "start" is :

if you make any changes to the bot config or character setups and you select save then start the bot, the bot crashes
but if you make changes press save , close the bot , then reopen the bot and select any character but don't make any other changes just press start the bot will start

the other problem that the bot crashes after 35minutes...well this bot is unstable it crashes after 30m but it can last the most 5 hours (this was my record) maybe someone will do a good update on it...or maybe not who knows.

Most likely the current crashes are coming from outdated offsets/asm code in the caliburst dll. Been watching my nephew this week so haven't had the free time to put the finishing touches on the bot but I am almost there.

06/10/2011 00:30 Menzoberanza#13

Thanks for replies :)

and Inathero ;) in only proves how green I am :p
Im old prick learning my place in cyber world :D Thanks for correcting me :)

06/10/2011 01:48 Inathero#14

Quote:

Originally Posted by Menzoberanza

Thanks for replies :)

and Inathero ;) in only proves how green I am :p
Im old prick learning my place in cyber world :D Thanks for correcting me :)

lol no problem, didn't mean to be mean at all, just wanted to point it out ^^

the only similarities between C# and C++ is the "C" in the name, other then that they are as different from black and white xD

06/10/2011 06:20 YoonYoungJo#15

Please give me what you have!! Especially if it attacks and kills indiscriminately! So I can work and XP!

Page 1 of 2